Authorization apps
81 authorization apps in one list: the established products, and every new one as it launches.
Updated
- Apps
- 81
- New
- +5
- Established
- 2
- Dead
- 3
New authorization apps per month
17 apps launched in the last 12 months, by month.
81 authorization apps in one list: the established products, and every new one as it launches.
Updated
17 apps launched in the last 12 months, by month.
The apps we added to this market most recently.
| # | App | Added |
|---|---|---|
| 1 | BO BoringSec Find, fix and verify security issues from code to production. | |
| 2 | AE Aevral A security agent for your code. Alternative to Claude Security. | |
| 3 |  Doberman The guard dog to stop your AI when it goes rogue. | |
| 4 |  Kinde Powerful user authentication that integrates in minutes. | |
| 5 | Auth0 Secure users, AI agents, and more with Auth0, an easy-to-implement, scalable, and adaptable authentication and authorization platform. | |
| 6 |  SpecialtyBiologicPharmacy Biologic Medication & Specialty Pharmacy Support | |
| 7 |  Veyra **Give an AI agent a wallet and it can either do nothing or spend anything.** There is no in-between. Veyra is that in-between. | |
| 8 | RI Rivault Rivault lets you safely and securely provide AI agents and CUA data and context for tasks. Store data and context in a zero-knowledge vault, When an AI agent needs data (Passport No. or Credit Card details) to execute a task like booking a flight, Rivault sends you an auth request, you unlock data with Face ID/ Passkey and data is deterministically redacted after task completes. Rivault never gets access to your data by default. | |
| 9 |  Kastra Kastra is the runtime authorization layer for AI agents. It decides what agents can and cannot do before actions execute, enforcing policies with sub-1 ms latency across tools, prompts, inputs, and outputs. Use one control plane to govern agents and policies across Claude Code, Cursor, Codex, OpenClaw, the Anthropic SDK, the OpenAI SDK, and more. Prevent unauthorized tool use, prompt injection, and exposure of sensitive data before they become incidents. Trust the rules, not the agents. | |
| 10 |  MonoCloud MonoCloud is one identity layer for your customers, your APIs, and your agents. Most tools stop at a login box. We go past login into authorization and accountability: decide exactly what every user, service, and AI agent can access, prove what it did, and revoke it in an instant. Fine-grained Cedar authorization, passkeys and SSO, API protection, M2M, and mTLS with certificate-bound trust, all on one platform. Startups get the full platform free for one year. | |
| 11 |  Keydris Prove each AI agent action was authorized and revoke instantly | |
| 12 | NO Nofone Search payer policies, contracts, and market data to guide care |
The products every new one is compared with.
Grouped by what each app says it does. 72 of 81 apps fit a group so far.
| Type | Apps | Share | Examples |
|---|---|---|---|
| Healthcare operations | 18 | 25.0% | Allayai, Casedaisy, ClaimGlide |
| Agent authorization and control | 15 | 20.8% | Agentfield, Agentic Fabriq, Clawvisor |
| Authentication and identity | 15 | 20.8% | Auth0, Authentik, Authorizer |
| Developer and productivity tools | 10 | 13.9% | Application ETA UK, BeMyReseller, Boxo |
| Security and data protection | 7 | 9.7% | Aevral, BoringSec, Corgi Labs |
| Authorization and permissions | 5 | 6.9% | Aserto, authzed, Cerbos |
| Payments and fintech platforms | 2 | 2.8% | HUBUC, Union54 |
What we could detect on their websites.
| Framework | Apps | Share |
|---|---|---|
| Next.js | 32 | 78.0% |
| WordPress | 4 | 9.8% |
Of 41 apps whose framework we could detect.
| Host | Apps | Share |
|---|---|---|
| Vercel | 21 | 80.8% |
| Netlify | 5 | 19.2% |
Of 26 apps whose host we could detect.
How many of the 81 apps show a price, and how many sell to large companies.
| Measure | Apps | Share of 81 |
|---|---|---|
| Publish a pricing page | 32 | 39.5% |
Control access to application features. For example, only project owners can delete a project, editors can update tasks, and viewers can read.
Protect data at the record or field level. An app can show only a customer’s own orders, or hide salary fields from non‑HR staff.
Gate API operations. A service can allow a partner key to call read endpoints but block write endpoints, or limit actions to specific tenants.
Approve sensitive actions. Before a bulk export or a production deploy, require that the requester has the right role and that a second approver signs off.
Manage multi‑tenant permissions. Keep each tenant’s users and roles isolated while reusing the same policy model across tenants.
Personalize UI and workflows. Render only the buttons and menu items the current identity may use, and disable flows they cannot complete.
Centralize audits and compliance. Produce who‑did‑what‑when reports for regulators and internal reviews.
Enable agent and machine identities. Let background jobs, webhooks, and AI agents act within precise scopes instead of broad admin rights.
Products like Permit.io and Auth0 are often used to add fine‑grained checks alongside existing login, while Authorizer, MonoCloud, and Kinde bundle authentication and authorization for new apps.
Product and engineering teams at software companies use authorization to ship features safely. They centralize rules, reduce ad‑hoc checks in code, and keep UI and APIs consistent.
Security and compliance teams use it to enforce least privilege, separate duties, and produce audits. They benefit from policy reviews, change history, and reporting.
Data platform and API owners protect datasets and endpoints. They apply row‑ and column‑level controls, rate‑limit sensitive actions, and keep partners within agreed scopes.
Enterprise IT and platform teams standardize access across many apps. They integrate authorization with identity providers, manage roles at scale, and align with internal governance.
Startups and small businesses adopt managed services like Kinde or MonoCloud to get login plus simple roles quickly, then grow into finer controls.
Teams adopting agents and automation use services like Permit.io and Auth0 to give non‑human actors only the permissions they need for each task.
Vendors usually charge by a subscription that scales with usage and team needs, often with a free tier for trials.
| Pricing model | How it works |
|---|---|
| Subscription tiers | Bundles of features, environments, and support in stepped plans. |
| Monthly active identities | Based on the number of distinct users, machines, or agents evaluated in a period. |
| Per request | Charges tied to authorization or policy evaluation calls made by your app. |
| Per seat | Each admin, developer, or analyst with dashboard access adds to the bill. |
| Enterprise contract | Custom pricing for advanced features, SLAs, and compliance needs. |
| Free tier | Limited identities or requests to support prototypes and small projects. |